CVE-2026-124509 | floci-io Floci up to 2.1.0 S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName BucketARN path traversal (Issue 4281)

SecurityVulns
Yanac

A vulnerability, which was classified as critical, was found in floci-io Floci up to 2.1.0. The affected element is the function S3Destination.bucketName of the file services/firehose/model/DeliveryStreamDescription.java of the component S3 Destination Configuration Handler. Such manipulation of the argument BucketARN leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-124509. The attack can be launched remotely. Moreover, an exploit is present.

You should upgrade the affected component.VulDB Recent EntriesRead More